ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2017-7442

PoC —
CVSS 3.0
8.8 high
EPSS
41%p99
Published
()
Modified
Description

Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences.

Vendors
gonitro
Products
nitro pro
Weakness
CWE-22
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (40.7%)

In the news

No ingested article mentions this CVE yet.